Privacy Policy

Who this notice covers

Globalnetic operates as a light MVNO. This notice concerns visitors to Globalnetic's business website and people who contact us on behalf of resellers or professional users, including IoT customers. Business contact details can still be personal data. Globalnetic does not offer consumer sales on this website.

The controller is the legal entity operating Globalnetic: full registered name and registration number to be confirmed. The currently listed address is Zadelmakerstraat 3, 2984 CC Ridderkerk, the Netherlands. Privacy enquiries can be directed to [email protected]. Any applicable data protection officer or representative details must be added before final publication.

Website enquiries and business relationships

When you contact us, we receive the details you choose to provide, such as your name, business email address, company, role and message. The contact form on this static website opens a draft in your email application; it does not itself send the message. Your email service processes the draft and transmission under its own terms.

We use business correspondence to answer enquiries and manage relationships. The proposed basis is our legitimate interest in communicating with business contacts. Where you are personally a contracting party, necessary pre-contractual steps or contract performance may be the appropriate basis instead. Contract and billing records may also need to be processed to meet legal obligations. The final notice must identify the actual processing and applicable basis for each purpose.

Service and SIM data

Globalnetic processes IMSI (mobile subscriber identifiers), IMEI (device identifiers), ICCID (SIM identifiers) and CDR records (connection or usage detail records). These identifiers and records can be personal data when they relate to an identifiable person, including in a business or IoT deployment.

The exact fields in the CDR records, their source, processing purposes, legal basis, access rights and retention periods must be confirmed per service. The final notice must distinguish processing needed for connectivity, usage administration or billing from any other purposes, and distinguish Globalnetic's role from that of its customers and network providers.

The presence of CDR records does not by itself establish that we hold communication content or precise location data. Their actual fields, data flows, network partners and legal responsibilities must be verified. Where we act as a processor for a business customer, the customer's instructions and the data processing agreement apply; the customer must provide its own relevant privacy information.

Website storage and technical records

This static website does not include advertising or analytics tracking scripts. Its theme may use browser storage for technical capabilities or interface preferences. Page requests necessarily expose connection information, such as an IP address, to the hosting infrastructure. The selected hosting provider, security services, access-log settings and retention period must be confirmed before launch.

Following a link to a social network or another external site takes you to that service, which processes information under its own privacy notice. No consent to unrelated tracking or international transfers is inferred simply from visiting this website.

Recipients and international transfers

Depending on the service, necessary information may be handled by contracted hosting, email, support and connectivity providers, professional advisers, or competent authorities where there is a lawful basis. The final supplier and recipient list, their roles and processing countries remain to be confirmed. Only information necessary for the relevant purpose should be shared.

If personal data is transferred outside the European Economic Area, the applicable transfer mechanism and safeguards must be identified before the transfer, for example an adequacy decision or appropriate contractual safeguards where valid and sufficient. Contact us for information about the safeguards applicable to your service. A foreign authority's request is not by itself an unrestricted permission to disclose data.

Retention

Retention must be limited to the relevant purpose and applicable legal obligations. The final schedule must specify periods or meaningful criteria for enquiries, contracts and invoices, service identifiers and usage records, support tickets, security logs and backups. We have not inserted unverified retention periods or promised that all network data is retained.

A lawful preservation requirement or a documented legal claim may justify retaining specific records beyond their ordinary period. This does not justify keeping unrelated data indefinitely.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests, including an unconditional right to object to direct marketing. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. Rights are subject to the conditions and exceptions in applicable law.

Send a request to [email protected]. We should request only proportionate information needed to verify identity; do not send a passport or complete SIM credentials with an initial enquiry. Under the GDPR, requests are normally answered within one month; where a lawful extension is necessary, you must be informed within that first month. You may complain to the Dutch Data Protection Authority or another competent supervisory authority.

Required information, security and changes

We will explain which information is needed to respond to an enquiry or provide a contracted service and what happens if it is not supplied. Any collection from third parties, profiling or automated decisions with significant effects must be described if applicable; those activities are not assumed in this draft.

Security measures and access controls must be appropriate to the actual processing risks. This notice is not a promise of absolute security. Material changes to this notice should be communicated in a way appropriate to the affected processing, with the effective date shown in the final version.